https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-06T21:52:47.038388+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-6959 CVE-2026-6959 — Nomad vulnerable to arbitrary file read/write on client host through symlink attack 2026-10-06T21:52:47.046070+00:00

Affected: HashiCorp Nomad, HashiCorp Nomad Enterprise

HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-6959) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11.